
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: 0OulvhThmCEDrQLS9wMXK8w1OMiS3z1GjkHrIx2GkUQ=
Subject key identifier: 7E:DE:16:E9:67:94:F2:A7:07:A9:39:5E:51:A6:15:0B:B5:8A:4A:1D
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 019F9059AE022F8468BA365CDB0B9D92B1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 1098
Signing time: Thu 23 Jul 2026 19:00:24 +0000
Manifest this update: Thu 23 Jul 2026 19:00:24 +0000
Manifest next update: Fri 24 Jul 2026 19:00:24 +0000
Files and hashes: 1: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (hash: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o=)
2: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (hash: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: wtwDKqB8JHsMCcxwsEEuPesTCgQP2l+vWj85f3z9sTw=)
4: x7X970YopYql2_ORGb5JC0O5FPc.roa (hash: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:ae:02:2f:84:68:ba:36:5c:db:0b:9d:92:b1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Jul 23 19:00:24 2026 GMT
Not After : Jul 24 19:00:24 2026 GMT
Subject: CN=7ede16e96794f2a707a9395e51a6150bb58a4a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:89:5e:ed:75:8c:7b:83:80:5a:a8:4a:df:
37:d1:d6:c6:08:19:f3:b7:3e:06:37:76:c3:f0:3f:
94:02:93:ae:04:6c:5c:76:52:aa:82:a6:33:1b:6b:
f6:06:fe:bd:0c:76:b6:d3:4a:bc:71:eb:5e:d7:e8:
02:51:f2:01:98:e5:8b:04:48:6d:20:b1:83:30:e3:
01:d0:c1:a5:16:1a:36:0f:7c:98:b1:a8:55:4b:4b:
3c:2c:f3:a3:1c:b8:11:8e:42:f2:48:8f:a6:70:65:
42:d5:b1:08:0a:50:2b:78:57:d8:97:f1:1f:3d:2a:
a9:28:e3:25:00:8a:10:27:a7:23:db:b7:8c:c4:3a:
c3:e9:61:12:c3:ab:48:94:80:fd:16:6f:5d:94:1f:
f5:80:3f:f2:8f:ce:2a:45:55:33:8e:5c:d0:2b:42:
1e:c2:e1:7d:39:93:6e:d6:af:3d:4d:bb:df:4f:fc:
8f:24:e0:20:44:98:ce:b2:7b:8a:a0:a2:0c:01:df:
6d:01:7f:ef:39:e4:40:ae:ce:3e:76:f7:2f:ed:e3:
ac:c9:a0:3d:64:3f:28:f2:67:84:df:b3:fa:60:d6:
b2:99:7f:57:23:16:7d:ac:38:84:0f:3a:41:93:52:
4e:24:24:1c:46:07:8d:40:8f:c9:b6:0a:0b:dd:bd:
62:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DE:16:E9:67:94:F2:A7:07:A9:39:5E:51:A6:15:0B:B5:8A:4A:1D
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7e:a1:af:f2:e4:b1:e6:4c:9e:b7:0d:6e:10:e9:aa:f8:fe:
4d:09:13:76:e1:0d:93:53:4f:f1:04:51:e4:4f:05:5f:88:dc:
56:28:f6:35:1d:d9:73:19:5d:e5:e3:67:7a:46:2b:4e:98:84:
47:55:df:99:75:e6:7d:22:bf:a9:d8:11:ec:f7:01:33:b8:68:
15:82:16:fc:0f:8f:3b:13:77:35:c3:dc:f0:7b:16:37:f3:3e:
ce:91:40:23:4b:db:43:47:f5:e4:a5:f5:df:34:c0:47:c7:c3:
01:ca:7a:47:e1:5e:8e:17:c5:55:e2:3c:f5:7e:1b:9e:60:10:
ed:7f:2f:d4:e3:ac:14:bc:fa:c2:85:af:2b:90:33:62:cd:ba:
65:ee:69:1c:7b:2b:a5:0e:b6:41:7c:b0:ea:8c:68:9a:a9:df:
1a:e5:31:d6:46:9b:14:4e:17:d6:7b:4c:2d:2a:19:db:7e:e1:
44:06:78:81:ba:7e:0e:fd:00:4f:e9:01:b1:27:d5:f7:34:95:
41:99:4f:10:c6:2f:ab:2a:8d:58:83:9d:23:35:31:75:83:5e:
44:fc:c2:ec:e4:2e:6d:c7:33:d4:53:2d:f6:4a:11:10:70:3b:
62:6b:91:a5:93:ae:2f:98:ac:b0:35:cc:b9:0e:6b:73:8f:c2:
9c:86:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:44 2026 by rpki-client